mirror of
https://github.com/juewuy/ShellCrash.git
synced 2026-03-11 07:51:45 +00:00
885 lines
37 KiB
Bash
885 lines
37 KiB
Bash
#!/bin/sh
|
||
# Copyright (C) Juewuy
|
||
#工具脚本
|
||
#工具与优化
|
||
tools() {
|
||
ssh_tools() {
|
||
stop_iptables() {
|
||
iptables -w -t nat -D PREROUTING -p tcp -m multiport --dports $ssh_port -j REDIRECT --to-ports 22 >/dev/null 2>&1
|
||
ip6tables -w -t nat -A PREROUTING -p tcp -m multiport --dports $ssh_port -j REDIRECT --to-ports 22 >/dev/null 2>&1
|
||
}
|
||
[ -n "$(cat /etc/firewall.user 2>&1 | grep '启用外网访问SSH服务')" ] && ssh_ol=禁止 || ssh_ol=开启
|
||
[ -z "$ssh_port" ] && ssh_port=10022
|
||
echo "-----------------------------------------------"
|
||
echo -e "\033[33m此功能仅针对使用Openwrt系统的设备生效，且不依赖服务\033[0m"
|
||
echo -e "\033[31m本功能不支持红米AX6S等镜像化系统设备，请勿尝试！\033[0m"
|
||
echo "-----------------------------------------------"
|
||
echo -e " 1 \033[32m修改\033[0m外网访问端口：\033[36m$ssh_port\033[0m"
|
||
echo -e " 2 \033[32m修改\033[0mSSH访问密码(请连续输入2次后回车)"
|
||
echo -e " 3 \033[33m$ssh_ol\033[0m外网访问SSH"
|
||
echo "-----------------------------------------------"
|
||
echo -e " 0 返回上级菜单 \033[0m"
|
||
echo "-----------------------------------------------"
|
||
read -p "请输入对应数字 > " num
|
||
case "$num" in
|
||
0) ;;
|
||
1)
|
||
read -p "请输入端口号(1000-65535) > " num
|
||
if [ -z "$num" ]; then
|
||
errornum
|
||
elif [ $num -gt 65535 -o $num -le 999 ]; then
|
||
echo -e "\033[31m输入错误！请输入正确的数值(1000-65535)！\033[0m"
|
||
elif [ -n "$(netstat -ntul | grep :$num)" ]; then
|
||
echo -e "\033[31m当前端口已被其他进程占用，请重新输入！\033[0m"
|
||
else
|
||
ssh_port=$num
|
||
setconfig ssh_port $ssh_port
|
||
sed -i "/启用外网访问SSH服务/d" /etc/firewall.user
|
||
stop_iptables
|
||
echo -e "\033[32m设置成功，请重新开启外网访问SSH功能！！！\033[0m"
|
||
fi
|
||
sleep 1
|
||
ssh_tools
|
||
;;
|
||
2)
|
||
passwd
|
||
sleep 1
|
||
ssh_tools
|
||
;;
|
||
3)
|
||
if [ "$ssh_ol" = "开启" ]; then
|
||
iptables -w -t nat -A PREROUTING -p tcp -m multiport --dports $ssh_port -j REDIRECT --to-ports 22
|
||
[ -n "$(ckcmd ip6tables)" ] && ip6tables -w -t nat -A PREROUTING -p tcp -m multiport --dports $ssh_port -j REDIRECT --to-ports 22
|
||
echo "iptables -w -t nat -A PREROUTING -p tcp -m multiport --dports $ssh_port -j REDIRECT --to-ports 22 #启用外网访问SSH服务" >>/etc/firewall.user
|
||
[ -n "$(ckcmd ip6tables)" ] && echo "ip6tables -w -t nat -A PREROUTING -p tcp -m multiport --dports $ssh_port -j REDIRECT --to-ports 22 #启用外网访问SSH服务" >>/etc/firewall.user
|
||
echo "-----------------------------------------------"
|
||
echo -e "已开启外网访问SSH功能！"
|
||
else
|
||
sed -i "/启用外网访问SSH服务/d" /etc/firewall.user
|
||
stop_iptables
|
||
echo "-----------------------------------------------"
|
||
echo -e "已禁止外网访问SSH！"
|
||
fi
|
||
;;
|
||
*)
|
||
errornum
|
||
;;
|
||
esac
|
||
}
|
||
#获取设置默认显示
|
||
grep -qE "^\s*[^#].*otapredownload" /etc/crontabs/root >/dev/null 2>&1 && mi_update=禁用 || mi_update=启用
|
||
[ "$mi_mi_autoSSH" = "已配置" ] && mi_mi_autoSSH_type=32m已配置 || mi_mi_autoSSH_type=31m未配置
|
||
[ -f "$CRASHDIR"/tools/tun.ko ] && mi_tunfix=32m已启用 || mi_tunfix=31m未启用
|
||
#
|
||
echo "-----------------------------------------------"
|
||
echo -e "\033[30;47m欢迎使用其他工具菜单：\033[0m"
|
||
echo -e "\033[33m本页工具可能无法兼容全部Linux设备，请酌情使用！\033[0m"
|
||
echo -e "磁盘占用/所在目录："
|
||
du -sh "$CRASHDIR"
|
||
echo "-----------------------------------------------"
|
||
echo -e " 1 ShellCrash\033[33m测试菜单\033[0m"
|
||
echo -e " 2 ShellCrash\033[32m新手引导\033[0m"
|
||
echo -e " 3 \033[36m日志及推送工具\033[0m"
|
||
[ -f /etc/firewall.user ] && echo -e " 4 \033[32m配置\033[0m外网访问SSH"
|
||
[ -x /usr/sbin/otapredownload ] && echo -e " 5 \033[33m$mi_update\033[0m小米系统自动更新"
|
||
[ "$systype" = "mi_snapshot" ] && echo -e " 6 小米设备软固化SSH ———— \033[$mi_mi_autoSSH_type \033[0m"
|
||
[ "$systype" = "mi_snapshot" ] && echo -e " 8 小米设备Tun模块修复 ———— \033[$mi_tunfix \033[0m"
|
||
echo "-----------------------------------------------"
|
||
echo -e " 0 返回上级菜单"
|
||
echo "-----------------------------------------------"
|
||
read -p "请输入对应数字 > " num
|
||
if [ -z "$num" ]; then
|
||
errornum
|
||
elif [ "$num" = 0 ]; then
|
||
i=
|
||
|
||
elif [ "$num" = 1 ]; then
|
||
testcommand
|
||
|
||
elif [ "$num" = 2 ]; then
|
||
userguide
|
||
|
||
elif [ "$num" = 3 ]; then
|
||
log_pusher
|
||
tools
|
||
|
||
elif [ "$num" = 4 ]; then
|
||
ssh_tools
|
||
sleep 1
|
||
tools
|
||
|
||
elif [ "$num" = 7 ]; then
|
||
echo "-----------------------------------------------"
|
||
if [ ! -f "$CRASHDIR"/tools/ShellDDNS.sh ]; then
|
||
echo -e "正在获取在线脚本……"
|
||
"$CRASHDIR"/start.sh get_bin "$TMPDIR"/ShellDDNS.sh tools/ShellDDNS.sh
|
||
if [ "$?" = "0" ]; then
|
||
mv -f "$TMPDIR"/ShellDDNS.sh "$CRASHDIR"/tools/ShellDDNS.sh
|
||
. "$CRASHDIR"/tools/ShellDDNS.sh
|
||
else
|
||
echo -e "\033[31m文件下载失败！\033[0m"
|
||
fi
|
||
else
|
||
. "$CRASHDIR"/tools/ShellDDNS.sh
|
||
fi
|
||
sleep 1
|
||
tools
|
||
|
||
elif [ -x /usr/sbin/otapredownload ] && [ "$num" = 5 ]; then
|
||
if [ "$mi_update" = "禁用" ]; then
|
||
grep -q "otapredownload" /etc/crontabs/root &&
|
||
sed -i "/^[^\#]*otapredownload/ s/^/#/" /etc/crontabs/root ||
|
||
echo "#15 3,4,5 * * * /usr/sbin/otapredownload >/dev/null 2>&1" >>/etc/crontabs/root
|
||
else
|
||
grep -q "otapredownload" /etc/crontabs/root &&
|
||
sed -i "/^\s*#.*otapredownload/ s/^\s*#//" /etc/crontabs/root ||
|
||
echo "15 3,4,5 * * * /usr/sbin/otapredownload >/dev/null 2>&1" >>/etc/crontabs/root
|
||
fi
|
||
echo "-----------------------------------------------"
|
||
echo -e "已\033[33m$mi_update\033[0m小米路由器的自动更新，如未生效，请在官方APP中同步设置！"
|
||
sleep 1
|
||
tools
|
||
|
||
elif [ "$num" = 6 ]; then
|
||
if [ "$systype" = "mi_snapshot" ]; then
|
||
mi_autoSSH
|
||
else
|
||
echo "不支持的设备！"
|
||
fi
|
||
tools
|
||
elif [ "$num" = 8 ]; then
|
||
if [ -f "$CRASHDIR"/tools/tun.ko ]; then
|
||
read -p "是否禁用此功能并移除相关补丁？(1/0) > " res
|
||
[ "$res" = 1 ] && {
|
||
rm -rf "$CRASHDIR"/tools/tun.ko
|
||
echo -e "\033[33m补丁文件已移除，请立即重启设备以防止出错！\033[0m"
|
||
}
|
||
elif ckcmd modinfo && [ -z "$(modinfo tun)" ]; then
|
||
echo -e "\033[33m本功能需要修改系统文件，不保证没有任何风险！\033[0m"
|
||
echo -e "\033[33m本功能采集的Tun模块并不一定适用于你的设备！\033[0m"
|
||
sleep 1
|
||
read -p "我已知晓，出现问题会自行承担！(1/0) > " res
|
||
if [ "$res" = 1 ]; then
|
||
echo "-----------------------------------------------"
|
||
echo "正在连接服务器获取Tun模块补丁文件…………"
|
||
"$CRASHDIR"/start.sh get_bin "$TMPDIR"/tun.ko bin/fix/tun.ko
|
||
if [ "$?" = "0" ]; then
|
||
mv -f "$TMPDIR"/tun.ko "$CRASHDIR"/tools/tun.ko &&
|
||
"$CRASHDIR"/misnap_init.sh tunfix &&
|
||
echo -e "\033[32m设置成功！请重启服务！\033[0m"
|
||
else
|
||
echo -e "\033[31m文件下载失败，请重试！\033[0m"
|
||
fi
|
||
fi
|
||
else
|
||
echo -e "\033[31m当前设备无需设置，请勿尝试！\033[0m"
|
||
sleep 1
|
||
fi
|
||
tools
|
||
else
|
||
errornum
|
||
fi
|
||
}
|
||
|
||
mi_autoSSH() {
|
||
echo "-----------------------------------------------"
|
||
echo -e "\033[33m本功能使用软件命令进行固化不保证100%成功！\033[0m"
|
||
echo -e "\033[33m如有问题请加群反馈：\033[36;4mhttps://t.me/ShellClash\033[0m"
|
||
read -p "请输入需要还原的SSH密码(不影响当前密码,回车可跳过) > " mi_mi_autoSSH_pwd
|
||
mi_mi_autoSSH=已配置
|
||
cp -f /etc/dropbear/dropbear_rsa_host_key "$CRASHDIR"/configs/dropbear_rsa_host_key 2>/dev/null
|
||
cp -f /etc/dropbear/authorized_keys "$CRASHDIR"/configs/authorized_keys 2>/dev/null
|
||
ckcmd nvram && {
|
||
nvram set ssh_en=1
|
||
nvram set telnet_en=1
|
||
nvram set uart_en=1
|
||
nvram set boot_wait=on
|
||
nvram commit
|
||
}
|
||
echo -e "\033[32m设置成功！\033[0m"
|
||
setconfig mi_mi_autoSSH $mi_mi_autoSSH
|
||
setconfig mi_mi_autoSSH_pwd $mi_mi_autoSSH_pwd
|
||
sleep 1
|
||
}
|
||
#日志菜单
|
||
log_pusher() {
|
||
[ -n "$push_TG" ] && stat_TG=32m已启用 || stat_TG=33m未启用
|
||
[ -n "$push_Deer" ] && stat_Deer=32m已启用 || stat_Deer=33m未启用
|
||
[ -n "$push_bark" ] && stat_bark=32m已启用 || stat_bark=33m未启用
|
||
[ -n "$push_Po" ] && stat_Po=32m已启用 || stat_Po=33m未启用
|
||
[ -n "$push_PP" ] && stat_PP=32m已启用 || stat_PP=33m未启用
|
||
[ -n "$push_SynoChat" ] && stat_SynoChat=32m已启用 || stat_SynoChat=33m未启用
|
||
[ -n "$push_Gotify" ] && stat_Gotify=32m已启用 || stat_Gotify=33m未启用
|
||
[ "$task_push" = 1 ] && stat_task=32m已启用 || stat_task=33m未启用
|
||
[ -n "$device_name" ] && device_s=32m$device_name || device_s=33m未设置
|
||
echo "-----------------------------------------------"
|
||
echo -e " 1 Telegram推送 ——\033[$stat_TG\033[0m"
|
||
echo -e " 2 PushDeer推送 ——\033[$stat_Deer\033[0m"
|
||
echo -e " 3 Bark推送-IOS ——\033[$stat_bark\033[0m"
|
||
echo -e " 4 Passover推送 ——\033[$stat_Po\033[0m"
|
||
echo -e " 5 PushPlus推送 ——\033[$stat_PP\033[0m"
|
||
echo -e " 6 SynoChat推送 ——\033[$stat_SynoChat\033[0m"
|
||
echo -e " 7 Gotify推送 ——\033[$stat_Gotify\033[0m"
|
||
echo "-----------------------------------------------"
|
||
echo -e " a 查看\033[36m运行日志\033[0m"
|
||
echo -e " b 推送任务日志 ——\033[$stat_task\033[0m"
|
||
echo -e " c 设置设备名称 ——\033[$device_s\033[0m"
|
||
echo -e " d 清空日志文件"
|
||
echo "-----------------------------------------------"
|
||
read -p "请输入对应数字 > " num
|
||
case "$num" in
|
||
a)
|
||
if [ -s "$TMPDIR"/ShellCrash.log ]; then
|
||
echo "-----------------------------------------------"
|
||
cat "$TMPDIR"/ShellCrash.log
|
||
exit 0
|
||
else
|
||
echo -e "\033[31m未找到相关日志！\033[0m"
|
||
fi
|
||
sleep 1
|
||
;;
|
||
1)
|
||
echo "-----------------------------------------------"
|
||
if [ -n "$push_TG" ]; then
|
||
read -p "确认关闭TG日志推送？(1/0) > " res
|
||
[ "$res" = 1 ] && {
|
||
push_TG=
|
||
chat_ID=
|
||
setconfig push_TG
|
||
setconfig chat_ID
|
||
}
|
||
else
|
||
#echo -e "\033[33m详细设置指南请参考 https://juewuy.github.io/ \033[0m"
|
||
private_bot() {
|
||
echo -e "请先通过 \033[32;4mhttps://t.me/BotFather\033[0m 申请TG机器人并获取其\033[36mAPI TOKEN\033[0m"
|
||
echo "-----------------------------------------------"
|
||
read -p "请输入你获取到的API TOKEN > " TOKEN
|
||
echo "-----------------------------------------------"
|
||
echo -e "请向\033[32m你申请的机器人\033[33m而不是BotFather！\033[0m"
|
||
url_tg=https://api.telegram.org/bot${TOKEN}/getUpdates
|
||
}
|
||
public_bot() {
|
||
echo -e "请向机器人：\033[32;4mhttps://t.me/ShellCrashtg_bot\033[0m"
|
||
TOKEN=publictoken
|
||
url_tg=https://tgbot.jwsc.eu.org/publictoken/getUpdates
|
||
}
|
||
set_bot() {
|
||
echo -e "发送此秘钥: \033[30;46m$public_key\033[0m"
|
||
echo "-----------------------------------------------"
|
||
read -p "我已经发送完成(1/0) > " res
|
||
if [ "$res" = 1 ]; then
|
||
[ -n "$authentication" ] && auth="$authentication@"
|
||
export https_proxy="http://${auth}127.0.0.1:$mix_port"
|
||
if curl --version >/dev/null 2>&1; then
|
||
chat=$(curl -kfsSl $url_tg 2>/dev/null)
|
||
else
|
||
chat=$(wget -Y on -q -O - $url_tg)
|
||
fi
|
||
[ -n "$chat" ] && chat_ID=$(echo $chat | sed 's/"update_id":/{\n"update_id":/g' | grep "$public_key" | head -n1 | grep -oE '"id":.*,"is_bot' | sed s'/"id"://' | sed s'/,"is_bot//')
|
||
[ -z "$chat_ID" ] && {
|
||
echo -e "\033[31m无法获取对话ID，请返回重新设置或手动输入ChatID！\033[0m"
|
||
echo -e "通常访问 \033[32;4m$url_tg\033[0m \n\033[36m即可看到ChatID\033[0m"
|
||
read -p "请手动输入ChatID > " chat_ID
|
||
}
|
||
if echo "$chat_ID" | grep -qE '^[0-9]{8,}$'; then
|
||
push_TG=$TOKEN
|
||
setconfig push_TG $TOKEN
|
||
setconfig chat_ID $chat_ID
|
||
"$CRASHDIR"/start.sh logger "已完成Telegram日志推送设置！" 32
|
||
else
|
||
echo -e "\033[31m无法获取对话ID，请重新配置！\033[0m"
|
||
sleep 1
|
||
chose_bot
|
||
fi
|
||
fi
|
||
}
|
||
chose_bot() {
|
||
public_key=$(cat /proc/sys/kernel/random/boot_id | sed 's/.*-//')
|
||
echo "-----------------------------------------------"
|
||
echo -e " 1 使用公共机器人 ——不依赖内核服务"
|
||
echo -e " 2 使用私人机器人 ——需要额外申请"
|
||
echo "-----------------------------------------------"
|
||
read -p "请输入对应数字 > " num
|
||
case $num in
|
||
1)
|
||
public_bot
|
||
set_bot
|
||
;;
|
||
2)
|
||
private_bot
|
||
set_bot
|
||
;;
|
||
*)
|
||
errornum
|
||
;;
|
||
esac
|
||
}
|
||
chose_bot
|
||
fi
|
||
sleep 1
|
||
log_pusher
|
||
;;
|
||
2)
|
||
echo "-----------------------------------------------"
|
||
if [ -n "$push_Deer" ]; then
|
||
read -p "确认关闭PushDeer日志推送？(1/0) > " res
|
||
[ "$res" = 1 ] && {
|
||
push_Deer=
|
||
setconfig push_Deer
|
||
}
|
||
else
|
||
#echo -e "\033[33m详细设置指南请参考 https://juewuy.github.io/ \033[0m"
|
||
echo -e "请先前往 \033[32;4mhttp://www.pushdeer.com/official.html\033[0m 扫码安装快应用或下载APP"
|
||
echo -e "打开快应用/APP，并完成登陆"
|
||
echo -e "\033[33m切换到「设备」标签页，点击右上角的加号，注册当前设备\033[0m"
|
||
echo -e "\033[36m切换到「秘钥」标签页，点击右上角的加号，创建一个秘钥，并复制\033[0m"
|
||
echo "-----------------------------------------------"
|
||
read -p "请输入你复制的秘钥 > " url
|
||
if [ -n "$url" ]; then
|
||
push_Deer=$url
|
||
setconfig push_Deer $url
|
||
"$CRASHDIR"/start.sh logger "已完成PushDeer日志推送设置！" 32
|
||
else
|
||
echo -e "\033[31m输入错误，请重新输入！\033[0m"
|
||
fi
|
||
sleep 1
|
||
fi
|
||
log_pusher
|
||
;;
|
||
3)
|
||
echo "-----------------------------------------------"
|
||
if [ -n "$push_bark" ]; then
|
||
read -p "确认关闭Bark日志推送？(1/0) > " res
|
||
[ "$res" = 1 ] && {
|
||
push_bark=
|
||
bark_param=
|
||
setconfig push_bark
|
||
setconfig bark_param
|
||
}
|
||
else
|
||
#echo -e "\033[33m详细设置指南请参考 https://juewuy.github.io/ \033[0m"
|
||
echo -e "\033[33mBark推送仅支持IOS系统，其他平台请使用其他推送方式！\033[0m"
|
||
echo -e "\033[32m请安装Bark-IOS客户端，并在客户端中找到专属推送链接\033[0m"
|
||
echo "-----------------------------------------------"
|
||
read -p "请输入你的Bark推送链接 > " url
|
||
if [ -n "$url" ]; then
|
||
push_bark=$url
|
||
setconfig push_bark $url
|
||
"$CRASHDIR"/start.sh logger "已完成Bark日志推送设置！" 32
|
||
else
|
||
echo -e "\033[31m输入错误，请重新输入！\033[0m"
|
||
fi
|
||
sleep 1
|
||
fi
|
||
log_pusher
|
||
;;
|
||
4)
|
||
echo "-----------------------------------------------"
|
||
if [ -n "$push_Po" ]; then
|
||
read -p "确认关闭Pushover日志推送？(1/0) > " res
|
||
[ "$res" = 1 ] && {
|
||
push_Po=
|
||
push_Po_key=
|
||
setconfig push_Po
|
||
setconfig push_Po_key
|
||
}
|
||
else
|
||
#echo -e "\033[33m详细设置指南请参考 https://juewuy.github.io/ \033[0m"
|
||
echo -e "请先通过 \033[32;4mhttps://pushover.net/\033[0m 注册账号并获取\033[36mUser Key\033[0m"
|
||
echo "-----------------------------------------------"
|
||
read -p "请输入你的User Key > " key
|
||
if [ -n "$key" ]; then
|
||
echo "-----------------------------------------------"
|
||
echo -e "\033[33m请检查注册邮箱，完成账户验证\033[0m"
|
||
read -p "我已经验证完成(1/0) > "
|
||
echo "-----------------------------------------------"
|
||
echo -e "请通过 \033[32;4mhttps://pushover.net/apps/build\033[0m 生成\033[36mAPI Token\033[0m"
|
||
echo "-----------------------------------------------"
|
||
read -p "请输入你的API Token > " Token
|
||
if [ -n "$Token" ]; then
|
||
push_Po=$Token
|
||
push_Po_key=$key
|
||
setconfig push_Po $Token
|
||
setconfig push_Po_key $key
|
||
"$CRASHDIR"/start.sh logger "已完成Passover日志推送设置！" 32
|
||
else
|
||
echo -e "\033[31m输入错误，请重新输入！\033[0m"
|
||
fi
|
||
else
|
||
echo -e "\033[31m输入错误，请重新输入！\033[0m"
|
||
fi
|
||
fi
|
||
sleep 1
|
||
log_pusher
|
||
;;
|
||
5)
|
||
echo "-----------------------------------------------"
|
||
if [ -n "$push_PP" ]; then
|
||
read -p "确认关闭PushPlus日志推送？(1/0) > " res
|
||
[ "$res" = 1 ] && {
|
||
push_PP=
|
||
setconfig push_PP
|
||
}
|
||
else
|
||
#echo -e "\033[33m详细设置指南请参考 https://juewuy.github.io/ \033[0m"
|
||
echo -e "请先通过 \033[32;4mhttps://www.pushplus.plus/push1.html\033[0m 注册账号并获取\033[36mtoken\033[0m"
|
||
echo "-----------------------------------------------"
|
||
read -p "请输入你的token > " Token
|
||
if [ -n "$Token" ]; then
|
||
push_PP=$Token
|
||
setconfig push_PP $Token
|
||
"$CRASHDIR"/start.sh logger "已完成PushPlus日志推送设置！" 32
|
||
else
|
||
echo -e "\033[31m输入错误，请重新输入！\033[0m"
|
||
fi
|
||
fi
|
||
sleep 1
|
||
log_pusher
|
||
;;
|
||
6)
|
||
echo "-----------------------------------------------"
|
||
if [ -n "$push_SynoChat" ]; then
|
||
read -p "确认关闭SynoChat日志推送？(1/0) > " res
|
||
[ "$res" = 1 ] && {
|
||
push_SynoChat=
|
||
setconfig push_SynoChat
|
||
}
|
||
else
|
||
echo "-----------------------------------------------"
|
||
read -p "请输入你的Synology DSM主页地址 > " URL
|
||
echo "-----------------------------------------------"
|
||
read -p "请输入你的Synology Chat Token > " TOKEN
|
||
echo "-----------------------------------------------"
|
||
echo -e '请通过"你的群晖地址/webapi/entry.cgi?api=SYNO.Chat.External&method=user_list&version=2&token=你的TOKEN"获取user_id'
|
||
echo "-----------------------------------------------"
|
||
read -p "请输入你的user_id > " USERID
|
||
if [ -n "$URL" ]; then
|
||
push_SynoChat=$USERID
|
||
setconfig push_SynoChat $USERID
|
||
setconfig push_ChatURL $URL
|
||
setconfig push_ChatTOKEN $TOKEN
|
||
setconfig push_ChatUSERID $USERID
|
||
"$CRASHDIR"/start.sh logger "已完成SynoChat日志推送设置！" 32
|
||
else
|
||
echo -e "\033[31m输入错误，请重新输入！\033[0m"
|
||
setconfig push_ChatURL
|
||
setconfig push_ChatTOKEN
|
||
setconfig push_ChatUSERID
|
||
push_SynoChat=
|
||
setconfig push_SynoChat
|
||
fi
|
||
fi
|
||
sleep 1
|
||
log_pusher
|
||
;;
|
||
# 在menu.sh的case $num in代码块中添加
|
||
7)
|
||
echo "-----------------------------------------------"
|
||
if [ -n "$push_Gotify" ]; then
|
||
read -p "确认关闭Gotify日志推送？(1/0) > " res
|
||
[ "$res" = 1 ] && {
|
||
push_Gotify=
|
||
setconfig push_Gotify
|
||
}
|
||
else
|
||
echo -e "请先通过Gotify服务器获取推送URL"
|
||
echo -e "格式示例: https://gotify.example.com/message?token=你的应用令牌"
|
||
echo "-----------------------------------------------"
|
||
read -p "请输入你的Gotify推送URL > " url
|
||
if [ -n "$url" ]; then
|
||
push_Gotify=$url
|
||
setconfig push_Gotify "$url"
|
||
"$CRASHDIR"/start.sh logger "已完成Gotify日志推送设置！" 32
|
||
else
|
||
echo -e "\033[31m输入错误，请重新输入！\033[0m"
|
||
fi
|
||
fi
|
||
sleep 1
|
||
log_pusher
|
||
;;
|
||
b)
|
||
[ "$task_push" = 1 ] && task_push='' || task_push=1
|
||
setconfig task_push $task_push
|
||
sleep 1
|
||
log_pusher
|
||
;;
|
||
c)
|
||
read -p "请输入本设备自定义推送名称 > " device_name
|
||
setconfig device_name $device_name
|
||
sleep 1
|
||
log_pusher
|
||
;;
|
||
d)
|
||
echo -e "\033[33m运行日志及任务日志均已清空！\033[0m"
|
||
rm -rf "$TMPDIR"/ShellCrash.log
|
||
sleep 1
|
||
log_pusher
|
||
;;
|
||
*) errornum ;;
|
||
esac
|
||
}
|
||
#测试菜单
|
||
testcommand(){
|
||
echo "$crashcore" | grep -q 'singbox' && config_path=${JSONSDIR}/config.json || config_path=${YAMLSDIR}/config.yaml
|
||
echo "-----------------------------------------------"
|
||
echo -e "\033[30;47m这里是测试命令菜单\033[0m"
|
||
echo -e "\033[33m如遇问题尽量运行相应命令后截图提交issue或TG讨论组\033[0m"
|
||
echo "-----------------------------------------------"
|
||
echo " 1 Debug模式运行内核"
|
||
echo " 2 查看系统DNS端口(:53)占用 "
|
||
echo " 3 测试ssl加密(aes-128-gcm)跑分"
|
||
echo " 4 查看ShellCrash相关路由规则"
|
||
echo " 5 查看内核配置文件前40行"
|
||
echo " 6 测试代理服务器连通性(google.tw)"
|
||
echo "-----------------------------------------------"
|
||
echo " 0 返回上级目录！"
|
||
read -p "请输入对应数字 > " num
|
||
case "$num" in
|
||
0)
|
||
main_menu
|
||
;;
|
||
1)
|
||
debug
|
||
testcommand
|
||
;;
|
||
2)
|
||
echo "-----------------------------------------------"
|
||
netstat -ntulp |grep 53
|
||
echo "-----------------------------------------------"
|
||
echo -e "可以使用\033[44m netstat -ntulp |grep xxx \033[0m来查询任意(xxx)端口"
|
||
exit;
|
||
;;
|
||
3)
|
||
echo "-----------------------------------------------"
|
||
openssl speed -multi 4 -evp aes-128-gcm
|
||
echo "-----------------------------------------------"
|
||
exit;
|
||
;;
|
||
4)
|
||
if [ "$firewall_mod" = "nftables" ];then
|
||
nft list table inet shellcrash
|
||
else
|
||
[ "$firewall_area" = 1 -o "$firewall_area" = 3 -o "$firewall_area" = 5 -o "$vm_redir" = "已开启" ] && {
|
||
echo "----------------Redir+DNS---------------------"
|
||
iptables -t nat -L PREROUTING --line-numbers
|
||
iptables -t nat -L shellcrash_dns --line-numbers
|
||
[ -n "$(echo $redir_mod | grep -E 'Redir模式|混合模式')" ] && iptables -t nat -L shellcrash --line-numbers
|
||
[ -n "$(echo $redir_mod | grep -E 'Tproxy模式|混合模式|Tun模式')" ] && {
|
||
echo "----------------Tun/Tproxy-------------------"
|
||
iptables -t mangle -L PREROUTING --line-numbers
|
||
iptables -t mangle -L shellcrash_mark --line-numbers
|
||
}
|
||
}
|
||
[ "$firewall_area" = 2 -o "$firewall_area" = 3 ] && {
|
||
echo "-------------OUTPUT-Redir+DNS----------------"
|
||
iptables -t nat -L OUTPUT --line-numbers
|
||
iptables -t nat -L shellcrash_dns_out --line-numbers
|
||
[ -n "$(echo $redir_mod | grep -E 'Redir模式|混合模式')" ] && iptables -t nat -L shellcrash_out --line-numbers
|
||
[ -n "$(echo $redir_mod | grep -E 'Tproxy模式|混合模式|Tun模式')" ] && {
|
||
echo "------------OUTPUT-Tun/Tproxy---------------"
|
||
iptables -t mangle -L OUTPUT --line-numbers
|
||
iptables -t mangle -L shellcrash_mark_out --line-numbers
|
||
}
|
||
}
|
||
[ "$ipv6_redir" = "已开启" ] && {
|
||
[ "$firewall_area" = 1 -o "$firewall_area" = 3 ] && {
|
||
ip6tables -t nat -L >/dev/null 2>&1 && {
|
||
echo "-------------IPV6-Redir+DNS-------------------"
|
||
ip6tables -t nat -L PREROUTING --line-numbers
|
||
ip6tables -t nat -L shellcrashv6_dns --line-numbers
|
||
[ -n "$(echo $redir_mod | grep -E 'Redir模式|混合模式')" ] && ip6tables -t nat -L shellcrashv6 --line-numbers
|
||
}
|
||
[ -n "$(echo $redir_mod | grep -E 'Tproxy模式|混合模式|Tun模式')" ] && {
|
||
echo "-------------IPV6-Tun/Tproxy------------------"
|
||
ip6tables -t mangle -L PREROUTING --line-numbers
|
||
ip6tables -t mangle -L shellcrashv6_mark --line-numbers
|
||
}
|
||
}
|
||
}
|
||
[ "$vm_redir" = "已开启" ] && {
|
||
echo "-------------vm-Redir-------------------"
|
||
iptables -t nat -L shellcrash_vm --line-numbers
|
||
iptables -t nat -L shellcrash_vm_dns --line-numbers
|
||
}
|
||
fi
|
||
exit;
|
||
;;
|
||
5)
|
||
echo "-----------------------------------------------"
|
||
sed -n '1,40p' ${config_path}
|
||
echo "-----------------------------------------------"
|
||
exit;
|
||
;;
|
||
6)
|
||
echo "注意：依赖curl(不支持wget)，且测试结果不保证一定准确！"
|
||
delay=`curl -kx ${authentication}@127.0.0.1:$mix_port -o /dev/null -s -w '%{time_starttransfer}' 'https://google.tw' & { sleep 3 ; kill $! >/dev/null 2>&1 & }` > /dev/null 2>&1
|
||
delay=`echo |awk "{print $delay*1000}"` > /dev/null 2>&1
|
||
echo "-----------------------------------------------"
|
||
if [ `echo ${#delay}` -gt 1 ];then
|
||
echo -e "\033[32m连接成功！响应时间为："$delay" ms\033[0m"
|
||
else
|
||
echo -e "\033[31m连接超时！请重试或检查节点配置！\033[0m"
|
||
fi
|
||
main_menu
|
||
;;
|
||
*)
|
||
errornum
|
||
main_menu
|
||
;;
|
||
esac
|
||
}
|
||
debug(){
|
||
echo "$crashcore" | grep -q 'singbox' && config_tmp="$TMPDIR"/jsons || config_tmp="$TMPDIR"/config.yaml
|
||
echo "-----------------------------------------------"
|
||
echo -e "\033[36m注意：Debug运行均会停止原本的内核服务\033[0m"
|
||
echo -e "后台运行日志地址：\033[32m$TMPDIR/debug.log\033[0m"
|
||
echo -e "如长时间运行后台监测，日志等级推荐error！防止文件过大！"
|
||
echo -e "你也可以通过：\033[33mcrash -s debug 'warning'\033[0m 命令使用其他日志等级"
|
||
echo "-----------------------------------------------"
|
||
echo -e " 1 仅测试\033[32m$config_tmp\033[0m配置文件可用性"
|
||
echo -e " 2 前台运行\033[32m$config_tmp\033[0m配置文件,不配置防火墙劫持(\033[33m使用Ctrl+C手动停止\033[0m)"
|
||
echo -e " 3 后台运行完整启动流程,并配置防火墙劫持,日志等级:\033[31merror\033[0m"
|
||
echo -e " 4 后台运行完整启动流程,并配置防火墙劫持,日志等级:\033[32minfo\033[0m"
|
||
echo -e " 5 后台运行完整启动流程,并配置防火墙劫持,日志等级:\033[33mdebug\033[0m"
|
||
echo -e " 6 后台运行完整启动流程,并配置防火墙劫持,且将错误日志打印到闪存：\033[32m$CRASHDIR/debug.log\033[0m"
|
||
echo "-----------------------------------------------"
|
||
echo -e " 8 后台运行完整启动流程,输出执行错误并查找上下文,之后关闭进程"
|
||
[ -s "$TMPDIR"/jsons/inbounds.json ] && echo -e " 9 将\033[32m$config_tmp\033[0m下json文件合并为$TMPDIR/debug.json"
|
||
echo "-----------------------------------------------"
|
||
echo " 0 返回上级目录！"
|
||
read -p "请输入对应数字 > " num
|
||
case "$num" in
|
||
0) ;;
|
||
1)
|
||
"$CRASHDIR"/start.sh stop
|
||
"$CRASHDIR"/start.sh bfstart
|
||
if echo "$crashcore" | grep -q 'singbox' ;then
|
||
"$TMPDIR"/CrashCore run -D "$BINDIR" -C "$TMPDIR"/jsons &
|
||
{ sleep 4 ; kill $! >/dev/null 2>&1 & }
|
||
wait
|
||
else
|
||
"$TMPDIR"/CrashCore -t -d "$BINDIR" -f "$TMPDIR"/config.yaml
|
||
fi
|
||
rm -rf "$TMPDIR"/CrashCore
|
||
echo "-----------------------------------------------"
|
||
exit
|
||
;;
|
||
2)
|
||
"$CRASHDIR"/start.sh stop
|
||
"$CRASHDIR"/start.sh bfstart
|
||
"$COMMAND"
|
||
rm -rf "$TMPDIR"/CrashCore
|
||
echo "-----------------------------------------------"
|
||
exit
|
||
;;
|
||
3)
|
||
"$CRASHDIR"/start.sh debug error
|
||
main_menu
|
||
;;
|
||
4)
|
||
"$CRASHDIR"/start.sh debug info
|
||
main_menu
|
||
;;
|
||
5)
|
||
"$CRASHDIR"/start.sh debug debug
|
||
main_menu
|
||
;;
|
||
6)
|
||
echo -e "频繁写入闪存会导致闪存寿命降低，如非遇到会导致设备死机或重启的bug，请勿使用此功能！"
|
||
read -p "是否继续？(1/0) > " res
|
||
[ "$res" = 1 ] && "$CRASHDIR"/start.sh debug debug flash
|
||
main_menu
|
||
;;
|
||
8)
|
||
$0 -d
|
||
main_menu
|
||
;;
|
||
9)
|
||
"$CRASHDIR"/start.sh core_check && "$TMPDIR"/CrashCore merge "$TMPDIR"/debug.json -C "$TMPDIR"/jsons && echo -e "\033[32m合并成功！\033[0m"
|
||
rm -rf "$TMPDIR"/CrashCore
|
||
main_menu
|
||
;;
|
||
*)
|
||
errornum
|
||
;;
|
||
esac
|
||
}
|
||
|
||
#新手引导
|
||
userguide(){
|
||
|
||
forwhat(){
|
||
echo "-----------------------------------------------"
|
||
echo -e "\033[30;46m 欢迎使用ShellCrash新手引导！ \033[0m"
|
||
echo "-----------------------------------------------"
|
||
echo -e "\033[33m请先选择你的使用环境： \033[0m"
|
||
echo -e "\033[0m(你之后依然可以在设置中更改各种配置)\033[0m"
|
||
echo "-----------------------------------------------"
|
||
echo -e " 1 \033[32m路由设备配置局域网透明代理\033[0m"
|
||
echo -e " 2 \033[36mLinux设备仅配置本机代理\033[0m"
|
||
[ -f "$CFG_PATH.bak" ] && echo -e " 3 \033[33m还原之前备份的设置\033[0m"
|
||
echo "-----------------------------------------------"
|
||
read -p "请输入对应数字 > " num
|
||
case "$num" in
|
||
1)
|
||
#设置运行模式
|
||
redir_mod="混合模式"
|
||
[ -n "$(echo $cputype | grep -E "linux.*mips.*")" ] && {
|
||
if grep -qE '^TPROXY$' /proc/net/ip_tables_targets || modprobe xt_TPROXY >/dev/null 2>&1; then
|
||
redir_mod="Tproxy模式"
|
||
else
|
||
redir_mod="Redir模式"
|
||
fi
|
||
}
|
||
setconfig crashcore "meta"
|
||
setconfig redir_mod "$redir_mod"
|
||
setconfig dns_mod mix
|
||
setconfig firewall_area '1'
|
||
#默认启用绕过CN-IP
|
||
setconfig cn_ip_route 已开启
|
||
#自动识别IPV6
|
||
[ -n "$(ip a 2>&1 | grep -w 'inet6' | grep -E 'global' | sed 's/.*inet6.//g' | sed 's/scope.*$//g')" ] && {
|
||
setconfig ipv6_redir 已开启
|
||
setconfig ipv6_support 已开启
|
||
setconfig ipv6_dns 已开启
|
||
setconfig cn_ipv6_route 已开启
|
||
}
|
||
#设置开机启动
|
||
[ -f /etc/rc.common -a "$(cat /proc/1/comm)" = "procd" ] && /etc/init.d/shellcrash enable
|
||
ckcmd systemctl && [ "$(cat /proc/1/comm)" = "systemd" ] && systemctl enable shellcrash.service > /dev/null 2>&1
|
||
rm -rf "$CRASHDIR"/.dis_startup
|
||
autostart=enable
|
||
#检测IP转发
|
||
if [ "$(cat /proc/sys/net/ipv4/ip_forward)" = "0" ];then
|
||
echo "-----------------------------------------------"
|
||
echo -e "\033[33m检测到你的设备尚未开启ip转发，局域网设备将无法正常连接网络，是否立即开启？\033[0m"
|
||
read -p "是否开启？(1/0) > " res
|
||
[ "$res" = 1 ] && {
|
||
echo 'net.ipv4.ip_forward = 1' >> /etc/sysctl.conf
|
||
sysctl -w net.ipv4.ip_forward=1
|
||
} && echo "已成功开启ipv4转发，如未正常开启，请手动重启设备！" || echo "开启失败！请自行谷歌查找当前设备的开启方法！"
|
||
fi
|
||
#禁止docker启用的net.bridge.bridge-nf-call-iptables
|
||
sysctl -w net.bridge.bridge-nf-call-iptables=0 > /dev/null 2>&1
|
||
sysctl -w net.bridge.bridge-nf-call-ip6tables=0 > /dev/null 2>&1
|
||
;;
|
||
2)
|
||
setconfig redir_mod "Redir模式"
|
||
[ -n "$(echo $cputype | grep -E "linux.*mips.*")" ] && setconfig crashcore "clash"
|
||
setconfig common_ports "未开启"
|
||
setconfig firewall_area '2'
|
||
;;
|
||
3)
|
||
mv -f $CFG_PATH.bak $CFG_PATH
|
||
echo -e "\033[32m脚本设置已还原！\033[0m"
|
||
echo -e "\033[33m请重新启动脚本！\033[0m"
|
||
exit 0
|
||
;;
|
||
*)
|
||
errornum
|
||
forwhat
|
||
;;
|
||
esac
|
||
}
|
||
forwhat
|
||
#检测小内存模式
|
||
dir_size=$(dir_avail "$CRASHDIR")
|
||
if [ "$dir_size" -lt 10240 ];then
|
||
echo "-----------------------------------------------"
|
||
echo -e "\033[33m检测到你的安装目录空间不足10M，是否开启小闪存模式？\033[0m"
|
||
echo -e "\033[0m开启后核心及数据库文件将被下载到内存中，这将占用一部分内存空间\033[0m"
|
||
echo -e "\033[0m每次开机后首次运行服务时都会自动的重新下载相关文件\033[0m"
|
||
echo "-----------------------------------------------"
|
||
read -p "是否开启？(1/0) > " res
|
||
[ "$res" = 1 ] && {
|
||
BINDIR=/tmp/ShellCrash
|
||
setconfig BINDIR /tmp/ShellCrash "$CRASHDIR"/configs/command.env
|
||
}
|
||
fi
|
||
#检测及下载根证书
|
||
openssldir="$(openssl version -d 2>&1 | awk -F '"' '{print $2}')"
|
||
[ ! -d "$openssldir/certs" ] && openssldir=/etc/ssl
|
||
if [ -d $openssldir/certs -a ! -f $openssldir/certs/ca-certificates.crt ];then
|
||
echo "-----------------------------------------------"
|
||
echo -e "\033[33m当前设备未找到根证书文件\033[0m"
|
||
echo "-----------------------------------------------"
|
||
read -p "是否下载并安装根证书？(1/0) > " res
|
||
[ "$res" = 1 ] && checkupdate && getcrt
|
||
fi
|
||
#设置加密DNS
|
||
if [ -s $openssldir/certs/ca-certificates.crt ];then
|
||
dns_nameserver='https://dns.alidns.com/dns-query, https://doh.pub/dns-query'
|
||
dns_fallback='https://cloudflare-dns.com/dns-query, https://dns.google/dns-query, https://doh.opendns.com/dns-query'
|
||
dns_resolver='https://223.5.5.5/dns-query, 2400:3200::1'
|
||
setconfig dns_nameserver "'$dns_nameserver'"
|
||
setconfig dns_fallback "'$dns_fallback'"
|
||
setconfig dns_resolver "'$dns_resolver'"
|
||
fi
|
||
#开启公网访问
|
||
sethost(){
|
||
read -p "请输入你的公网IP地址 > " host
|
||
echo $host | grep -oE '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}'
|
||
if [ -z "$host" ];then
|
||
echo -e "\033[31m请输入正确的IP地址！\033[0m"
|
||
sethost
|
||
fi
|
||
}
|
||
if ckcmd systemctl;then
|
||
echo "-----------------------------------------------"
|
||
echo -e "\033[32m是否开启公网访问Dashboard面板及socks服务？\033[0m"
|
||
echo -e "注意当前设备必须有公网IP才能从公网正常访问"
|
||
echo -e "\033[31m此功能会增加暴露风险请谨慎使用！\033[0m"
|
||
echo -e "vps设备可能还需要额外在服务商后台开启相关端口"
|
||
read -p "现在开启？(1/0) > " res
|
||
if [ "$res" = 1 ];then
|
||
read -p "请先设置面板访问秘钥 > " secret
|
||
read -p "请先修改Socks服务端口(1-65535) > " mix_port
|
||
read -p "请先设置Socks服务密码(账号默认为crash) > " sec
|
||
[ -z "$sec" ] && authentication=crash:$sec
|
||
host=$(curl ip.sb 2>/dev/null | grep -oE '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}')
|
||
if [ -z "$host" ];then
|
||
sethost
|
||
fi
|
||
public_support=已开启
|
||
setconfig secret $secret
|
||
setconfig mix_port $mix_port
|
||
setconfig host $host
|
||
setconfig public_support $public_support
|
||
setconfig authentication "'$authentication'"
|
||
fi
|
||
fi
|
||
#启用推荐的自动任务配置
|
||
. "$CRASHDIR"/task/task.sh && task_recom
|
||
#小米设备软固化
|
||
if [ "$systype" = "mi_snapshot" ];then
|
||
echo "-----------------------------------------------"
|
||
echo -e "\033[33m检测到为小米路由设备，启用软固化可防止路由升级后丢失SSH\033[0m"
|
||
read -p "是否启用软固化功能？(1/0) > " res
|
||
[ "$res" = 1 ] && mi_autoSSH
|
||
fi
|
||
#提示导入订阅或者配置文件
|
||
[ ! -s "$CRASHDIR"/yamls/config.yaml -a ! -s "$CRASHDIR"/jsons/config.json ] && {
|
||
echo "-----------------------------------------------"
|
||
echo -e "\033[32m是否导入配置文件？\033[0m(这是运行前的最后一步)"
|
||
echo -e "\033[0m你必须拥有一份配置文件才能运行服务！\033[0m"
|
||
echo "-----------------------------------------------"
|
||
read -p "现在开始导入？(1/0) > " res
|
||
[ "$res" = 1 ] && inuserguide=1 && {
|
||
if [ -f "$CRASHDIR"/v2b_api.sh ];then
|
||
. "$CRASHDIR"/v2b_api.sh
|
||
else
|
||
set_core_config
|
||
fi
|
||
set_core_config
|
||
inuserguide=""
|
||
}
|
||
}
|
||
#回到主界面
|
||
echo "-----------------------------------------------"
|
||
echo -e "\033[36m很好！现在只需要执行启动就可以愉快的使用了！\033[0m"
|
||
echo "-----------------------------------------------"
|
||
read -p "立即启动服务？(1/0) > " res
|
||
[ "$res" = 1 ] && start_core && sleep 2
|
||
main_menu
|
||
}
|